Tor (short for The onion router) is a system intended to enable online anonymity. Tor client software routes Internet traffic through a worldwide volunteer network of servers in order to conceal a user's location or usage from anyone conducting network surveillance or traffic analysis.

learn more… | top users | synonyms

0
votes
0answers
74 views

How 'private' is my setup?

I'm currently running QubesOS (so essentially a virtualized Fedora operating system), which I use to access an offshore VPS through I2P (using garliccat). I then route all my traffic through the VPS ...
4
votes
1answer
120 views

Decrypting TOR traffic?

Is there any way to decrypt tor traffic from an exit node or relay? I know it's possible to analyze the traffic using something like tcpflow or tcpdump, but it comes back as encrypted giberish. Is ...
0
votes
0answers
62 views

Is this a security flaw in tor? [duplicate]

I realize this question more belongs on the tor exchange (and i have indeed posted it there) so if you want to vote to close this question I completely understand. But I have noticed that this site it ...
1
vote
2answers
83 views

Online anonymity for a journalist in a dangerous country [closed]

I am a journalist in a corrupt country. I am concerned that my online usage will allow my antagonists to track me down, and it wouldn't end very good. I am aware that I may use TOR and VPNs, and ...
0
votes
0answers
32 views

Theoretical VPN and Tor Encryption Chain

Okay, so I've been looking around at the benefits of using tor to access you vpn and vice versa. Here's what I've come up with: VPN -> Tor Pros: Hides Tor usages from isp Hides your activities ...
4
votes
1answer
48 views

TOR makes multiple connections - why?

When using TOR, I issued this in terminal sudo netstat -punta | grep 443. Output was tcp 0 0 x.x.x.x:y a.a.a.a:443 ESTABLISHED 5769/tor tcp 0 0 x.x.x.x:y ...
1
vote
0answers
16 views

Whonix Signature verification failure

I've downloaded Whonix images and I have successfully imported the signing key (https://www.whonix.org/wiki/Whonix_Signing_Key). I have also established trust for the said key and verified that by ...
1
vote
0answers
13 views

Is there a valuable difference between two OR hops and ten? [migrated]

Suppose you use an Onion Proxy to connect to the onion network. Is it any safer for your traffic to travel through ten onion routers than two onion routers? I figured you need at least two onion ...
-1
votes
2answers
44 views

Can Tor pre-built binaries be different than if someone builds from source? [closed]

Is there a possibility (and how likely is it) that the pre-built binaries of Tor that most of us use are backdoored or altered in some way, unlike the source code?
0
votes
0answers
21 views

Root android apps to Tor [migrated]

I have an android and I can only use Tor through orbot to browse the Internet. Is there a way I can run all of my apps through Tor so that every app I use on my phone will be secured and untraceable?
3
votes
4answers
189 views

In a monitored network, can the admins tell if Tor is being used?

I'm not asking if Tor is secure, I'm asking if an observer can know you are using Tor? For example if a persons ISP or company network monitors traffic would they be able to determine with certainty ...
2
votes
1answer
104 views

What is the best setup to keep my email private from both attackers and government agencies?

I am attempting to setup a secure and private email account for my company. we currently use gmail which actually requests the emails from a hosting service provider that is configured with our ...
1
vote
0answers
46 views

Setting the exit node of a tor relay by country [closed]

I'm having some trouble in setting the country of the tor exit nodes. Following this link, by adding the bellow entries to the ./Data/torrc ExitNodes {ru} StrictNodes 1 an exit node from the ...
2
votes
1answer
82 views

Are darknets in the internet like Tor and i2p similar to darknets implemented for security like the CAIDA network telescope.?

I am planning to implement a darknet in an organizational network to work alongside SNORT to detect malicious scanning activities in the network like the CAIDA network telescope/Internet Motion ...
-3
votes
2answers
66 views

Is there any benefit to login to a website as anonymously as possible, if you've already been there from an identifiable IP address?

Here's a basic example of the situation I am in: 1.Friend downloads full-length, new release movie on shady internet site (felony). 2.Uploads it to a randomly created, cloud hosting service account ...
4
votes
2answers
104 views

Solution to remain anonymous on a website that dismiss tor users?

I want to access to a website who recognize tor users and dismiss them. I have read that if you connect to a proxy after your tor exit node, the website wouldn't know that you are a tor user and ...
3
votes
2answers
171 views

How does a Tor exit node know the public key of the client?

When the Tor exit node executes the client's request and receives a response from the server, it must create an onion cell that can be reversely decrypted along a circuit through the Tor network. ...
4
votes
2answers
125 views

How do dissidents use Tor?

The most common justification for Tor is that people in countries like China that don't have full protections on free speech can use it to publish dissenting opinions or access foreign information. I ...
1
vote
2answers
143 views

Is chaining multiple VPNs a good way to reach anonymity on the internet?

I would like to chain a couple, say 6 or 7, VPNs together to create a sort of "super" encrypted lane on the internet. I'm not too concerned about speeds, all I want is privacy and anonymity. I've ...
0
votes
0answers
33 views

How to detect if Tor is being used in the network [duplicate]

I believe Tor is an excellent tool to anonymise the internet usage. However as an admin, how can someone detect if Tor is being used on the network? This becomes crucial in case of institutions like ...
2
votes
1answer
86 views

Non-profit on limited budgets looking for safety with VPN/TOR etc [closed]

First off, thank you ahead of time for your patience. We are a small non-profit with a 100% volunteer staff. We deal with children and some adults that suffer from Mitochondrial disease. So, I was ...
4
votes
3answers
107 views

Does using DNSSEC in parallel with an anonymisation network decrease your privacy?

When using an anonymous communication network like Tor, to ensure privacy you must route your DNS traffic through the system even if your computer always uses DNSSEC for DNS lookups, would this be ...
1
vote
3answers
111 views

Using TOR secure

TOR is fully secure only if I use HTTPS, right? But not every site supports it, so I had an idea - some online anonymizers support HTTPS, so if I connect via TOR (TOR - ANONYMIZER - site), will that ...
2
votes
2answers
297 views

In theory, can a restricted-use ToR network be created with “Verifiable Encryption”? How should I approach learning it?

I have mobile devices (low power, low bandwidth) need to act as a proxy for certain types of P2P encrypted data, such as voting, bitcoin payment, or other specific-purpose usage, and I want to make ...
0
votes
1answer
46 views

Splitting data between wifi networks for security

Does there exist, software or technology, that can use more than one wifi network, in such a way that only part of the data travels through each 'side'? You would probably need an end address like a ...
1
vote
1answer
28 views

Syverson's paper (Users Get Routed), What do they mean by “common locations”?

I am preparing a survey on Tor and its security. While searching for resources, I have come across with the paper Users Get Routed:Traffic Correlation on Tor by Realistic Adversaries. I comprehend the ...
0
votes
2answers
56 views

Using the TOR network with a Proxy

I have just implemented a new web-filtering proxy system for my organisation, and I was wondering what the recommendations would be to test the use of TOR through this web-proxy. We are doing SSL ...
5
votes
1answer
348 views

proxychains + dnscrypt + tor

I'm currently working in Kali and I'm trying to boost my security and anonymity online. Please, bear with me for I am no expert yet. Googling and searching here has yielded useful info but not enough ...
0
votes
0answers
37 views

why tor nodes maintain tls keys with all other tor nodes?

I read that tor proxy maintains session key with tor nodes and use it while encrypting data but why tor nodes maintain keys with other tor nodes?
0
votes
1answer
162 views

Does Google hand over captcha IPs to webmasters?

Google gets to know a user's IP when someone enters a captcha even if they are using tor (see http://www.wired.com/2014/12/google-one-click-recaptcha/). So, If I go to a non-google website, such as ...
3
votes
1answer
107 views

How secure are Tor circuits?

Sometime ago I was talking with a friend about security of different anonimity software kits. The most famous software we talked about was Tor. While I was talking about the triple secret used in ...
2
votes
2answers
95 views

Using anonymous email as official email

Assuming I have created an email in hushmail through of tor, and if I use it as my official email in a site such as Github. Will it throw my anonymity away as I use github from a regular browser?
12
votes
3answers
301 views

Is there any difference between visiting Facebook via their Tor address, and visiting them via their normal address over Tor?

From a security perspective, is visiting via the .onion address more/less secure? I'm using Facebook as an example, but this question is really about any website which has both a 'normal' and a Tor ...
0
votes
0answers
122 views

Is a VPN enough to hide my trafic from my schools IT department? [duplicate]

At my school we log on WiFi with a personal login. If I wanted to hide the traffic from my computer from the network administrators would it be enough for me to use a VPN service like for example ...
1
vote
0answers
20 views

Is it possible to combine VPN and TOR on the same connection? [duplicate]

I'm looking into using a Raspberry Pi 2 between my Router and my Modem acting as an VPN and possibly a TOR gateway (two-in-one). It should just be out-of-the-way and passively/transparently route all ...
5
votes
2answers
139 views

How does Tor guarantee anonymity of Tor network?

To me it seems that the only thing Tor is doing for anonymity (not security!) is the fact that it does not record the traffic in and out, because obviously if every router was recording the traffic ...
0
votes
1answer
64 views

Security of host computer and network with Tor

I'm considering running a Tor (non-exit) relay on my personal Ubuntu 14.04 computer at home (which also has my personal data on it). I wanted to know if I should have any concerns about the security ...
1
vote
1answer
64 views

TOR node in a box [closed]

Let's say I want to help the TOR network - that relies on volunteers to donate bandwidth - but I am not familiar with Linux nor am I hacker of any kind. Is there a product like TOR node in a a box ...
-1
votes
1answer
610 views

How to detect/block i2p traffic? [closed]

From Wikipedia: The Invisible Internet Project (I2P) is a computer network layer that allows applications to send messages to each other pseudonymously and securely. How can I detect/ block ...
5
votes
1answer
723 views

Can a malicious Tor exit node perform a HTTPS man-in-the-middle attack to see/modify your HTTPS traffic?

Let's say I am browsing the Internet using Tor - visiting https://example.com/login.php - and the NSA is operating the Tor exit node which I am currently routed to use. Can that NSA exit relay swap ...
3
votes
1answer
196 views

In depth TOR encryption design details

I am currently struggling with understanding the details of a connection in tor, mainly because I try to understand PCTCP. In this paper the authors claim that the changes are local to the onion ...
3
votes
2answers
156 views

Can First Hop Man in the Middle be Defeated with TOR or VPN?

I was reading this article about a certain in flight WiFi provider issuing fake SSL certificates for Google. This doesn't really surprise me all that much since I'm well aware of the concept of ...
5
votes
2answers
383 views

Tor versus direct monitoring

I know if I use Tor and maybe made a tweet, it gives the government a really tough time tracing the originator. But what if like a police car was directly outside my home for instance. Is it still ...
0
votes
0answers
97 views

What registrars support *.onion TLD as a Subject Alternative Name, and how does validation work?

I'm interested in obtaining a .onion TLD in my SAN name from a public CA. Which Public CAs support .onion TLDs and what is the validation process like (e.g. Whois isn't available for ToR) Update: ...
0
votes
1answer
86 views

Is there any “Internet Kill Switch” feature in TOR Browser Bundle?

At times a VPN drops connection and leaks traffic. Some VPNs have "Internet Kill Switch" to stop traffic automatically when this happens. Does TOR browser bundle also have any such feature by default ...
2
votes
1answer
117 views

Is tor really fully decentralized?

I think, somewhere an initial list of the connectable peers had to download. Manipulating this list, or the server providing this list, weren't a serious security compromise of the whole network?
5
votes
1answer
188 views

About onion packet and onion routing?

I was just wondering if anyone has a diagram showing what is encrypted inside an onion packet when it leaves the sender? When a Tor client sends the packet out, wouldn't the entry onion node know ...
-1
votes
1answer
80 views

Blocking Tor By Trying to Connect to an Entry Node [closed]

So, I had an idea on how to block Tor (or similar tools) from being used on your network (or ISP, which is perhaps more relevant, considering Tor's mission). I'm assuming it wouldn't work (based on ...
11
votes
1answer
250 views

Is TLS in Tor useless?

I am trying to optimize the Orchid Tor client library for my needs and noticed that every connection with every node uses TLS with turned off certificate verification. Actually there are no TLS ...
3
votes
2answers
117 views

Tor and remote desktop viewing

If I am using tor for anonimity, does this prevent staff at a place of employment or an educational institution from remotely viewing my desktop and seeing what I am doing on Tor? If so how can I get ...